Static task
static1
Behavioral task
behavioral1
Sample
Teenage-Mutant-Ninja-Turtles_Win_EN_RIP-Version.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Teenage-Mutant-Ninja-Turtles_Win_EN_RIP-Version.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
TMNT 2003/tmnt.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
TMNT 2003/tmnt.exe
Resource
win10v2004-20240226-en
General
-
Target
Teenage-Mutant-Ninja-Turtles_Win_EN_RIP-Version.zip
-
Size
211.6MB
-
MD5
f3a5aaa6084743b9e6d35fb5007ba5f9
-
SHA1
b58fefe6180f649a264375cca18878322e1cb38c
-
SHA256
36ae103fd24b3a0d365574a0df9f4175c5bb6640d81ef75b51fe46a9b5df86ef
-
SHA512
248ca4f51a7838144a2f53e024361aefd81a139d9bdb903309ad21e40e2277ba507862c45e1917223473caf550ba1907caf46171994d12566c985e4dbe6d9c80
-
SSDEEP
3145728:ND3BKABHVf1VJ+Oudya/bKwaqslVfp9zB0jSQ5G4IGo5b30AjgO/6BRtLRE3jP3D:R30oHHVJ6bKlVf3V0N5rIZ5NB0hWHf
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/TMNT 2003/RegSetup.exe unpack001/TMNT 2003/tmnt.exe
Files
-
Teenage-Mutant-Ninja-Turtles_Win_EN_RIP-Version.zip.zip
-
TMNT 2003/ReadMe.htm.html
-
TMNT 2003/RegSetup.exe.exe windows:4 windows x86 arch:x86
d85f34a54aab1f2b279ca90a0f70a754
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameA
WriteFile
GetWindowsDirectoryA
GetCurrentDirectoryA
DeleteFileA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
GetCommandLineA
GetTempPathA
GetStartupInfoA
UnhandledExceptionFilter
GetModuleFileNameA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
LoadLibraryA
GetProcAddress
SetStdHandle
GetACP
GetCPInfo
HeapFree
HeapAlloc
GetModuleHandleA
CloseHandle
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetStdHandle
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
GetLastError
GetFileAttributesA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
user32
SetWindowPos
EndDialog
GetSystemMetrics
GetWindowRect
DialogBoxParamA
GetDlgItem
SendMessageA
MessageBoxA
KillTimer
EnableWindow
SetWindowTextA
SetTimer
advapi32
RegCloseKey
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
comctl32
ord17
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
TMNT 2003/SaveGame.dat
-
TMNT 2003/SaveSetting.dat
-
TMNT 2003/TMNT.DAT
-
TMNT 2003/TMNT_V00.DAT
-
TMNT 2003/TMNT_V01.DAT
-
TMNT 2003/TMNT_V02.DAT
-
TMNT 2003/bgm.afs
-
TMNT 2003/se.afs
-
TMNT 2003/tmnt.exe.exe windows:4 windows x86 arch:x86
b9a4d1f27ffab07478e722bb38a7f0ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
d3d9
Direct3DCreate9
dsound
ord1
winmm
timeKillEvent
timeSetEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeGetTime
comctl32
ord17
kernel32
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
ReadFile
GetLocalTime
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetVersionExA
GetCurrentThreadId
GetCurrentProcessId
SetCurrentDirectoryA
GetSystemInfo
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
ResumeThread
SuspendThread
CreateEventA
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
DeleteCriticalSection
PulseEvent
SetThreadAffinityMask
SetThreadPriorityBoost
Sleep
ExitThread
CreateThread
GetLastError
GetOverlappedResult
SetFilePointer
GetFileSize
GetFullPathNameA
lstrlenA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
lstrcmpiA
GetLocaleInfoW
SetEndOfFile
HeapSize
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
SetStdHandle
VirtualProtect
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
VirtualQuery
FlushFileBuffers
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCurrentProcess
TerminateProcess
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
RaiseException
MapViewOfFile
CreateFileMappingA
CreateFileW
UnmapViewOfFile
ExitProcess
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
RtlUnwind
GetTickCount
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
VirtualFree
VirtualAlloc
IsBadWritePtr
user32
IsIconic
GetWindowLongA
GetMenu
GetWindowRect
SystemParametersInfoA
MessageBoxA
WaitMessage
PeekMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
ShowWindow
LoadIconA
LoadCursorA
FindWindowA
SetForegroundWindow
RegisterClassA
CreateWindowExA
DefWindowProcA
SetCursor
PostQuitMessage
BeginPaint
EndPaint
UpdateWindow
SetRect
AdjustWindowRectEx
GetSystemMetrics
SetWindowLongA
SetWindowPos
DestroyWindow
GetClientRect
gdi32
DeleteObject
GetStockObject
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_rwcseg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PSFD00 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PSFD_I Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PSFD_P Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PSFD_B Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_rwdseg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
TMNT 2003/voice.afs